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IN THE CLAIMS 
Amended claims follow: 

1 . (Cturently Amended) A proxy device for performing malware scanning of files stored 
within a file storage device of a computer network, the computer network having a 
plurality of client devices arranged to issue access requests using a dedicated file access 
protocol to the file storage device in order to access files stored on the file storage device, 
the proxy device being arranged so as to intercept access requests issued to the file 
storage device, and comprising: 

a first interface for receiving an access request issued by one of said client devices 
to said file storage device using the dedicated file access protocol; 

a second interface for communicating with the file storage device to cause the file 
storage device to process the access request; 

processing logic for causing selected malware scanning algorithms to be executed 
to determine whether the file identified by the access request is to be considered as 
malware; 

wherein the processinp logic is responsive to confijogiration data to determine 
which malware scanning algorithms should be selected for a particular file, the proxy 
device fiirther comprising a sc anning enpine tn ey ^ute the malware scanning algorithms 
selected bv the processing logic: 

wherein each device in the computer network is assigned an identifier, and the 
proxv device is assigned the same identifier as is assigned to the file storage dsvice. the 
fu-st interface being connectable to a communication infi-astructure of the computer 
network to enable communication between the proxv device and said client devices, and 
the file storage device being connectable to the second interfkce such tTint the file storage 
device is only accessible bv said client devices via said proxy device: 

wherein the secon d interface is configured to enable a plur ality of file storage 
devices to be connected to the proxv device, each file storage device having a different 
identifier^ and the proxy device being assigned multiple identifiers corresponding to the 
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identifiers of the conne cted file storage devices, the fibrst interface being confiotifed to 
receive anv access requ ests issued to one of said connected file storage devices . 

2. (Original) A proxy device as claimed in claim 1, wherein the dedicated file access 
protocol is the Server Message Block (SMB) protocol, and the access requests are SMB 
calls issued to the file storage device. 

3. (Original) A proxy device as claimed in claim 1, wherein the dedicated file access 
protocol is the Network Pile System (NFS) protocol, and the access requests are NFS 
calls issued to the file storage device. 

4. (Cancelled) 

5. (Cancelled) 

6. (Cancelled) 

7. (Cancelled) 

8. (Original) A proxy device as claimed in claim 1. fijrther comprising a file cache for 
storing files previously accessed by the client devices, upon receipt of an access request 
identifying a file to be read firom the file storage device, the processing logic being 
arranged to determine whether the file identified by the access request is stored in the file 
cache and if so to return the file to the client device without communicating with the file 
storage device via the second interface. 

9. (Original) A proxy device as claimed in claim 8, wherein the file cache is arranged 
only to store files which have been determined not to be considered as malware. 

10. (Original) A proxy device as claimed in claim 1, wherein, upon receipt of an access 
request from a client device, the processing logic is arranged to detemiine from the 
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access request predetermined anribute^ and to send those predetermined attributes to the 
file storage device to enable the file storage device to perform a validation check, the 
processing logic only allowing the access request to proceed if the file storage device 
confirms that the client device is allowed to access the file identified by the file access 
request. 

1 1. (Original) A proxy device as claimed in claim 10, ftirther comprising a user cache for 
storing the predetermined attributes. 

12. (Original) A balanced proxy system for performing malware scanning of files stored 
within a file storage device of a Computer network, the computer network having a 
plurality of client devices arranged to issue access requests using a dedicated file access 
protocol to the file storage device in order to access files stored on the file storage device, 
the balanced proxy system comprising: 

a plurality of proxy devices as claimed in claim 1 arranged so as to mtercept 
access requests issued to the file storage device; and 

a passive load balancing mechanism arranged to configure each client device to 
communicate v/ith a particular proxy device ia said plurality, such thsA an access request 
issued by a particular client device will be directed to a predetermined one of said proxy 
devices dependent on how that client device was configured by the passive load 
balancing mechanism. 

13. (Cimiently Amended) A method of operating a proxy device to perform malware 
scanning of files stored within a file storage device of a computer network, the computer 
network having a plurality of client devices arranged to issue access requests using a 
dedicated file access protocol to the file storage device in order to access files stored on 
the file storage device, the proxy device being arranged so as to intercept access requests 
issued to the file storage device, and the metiiod comprising the steps of: 

(a) receiving an access request issued by one of said client devices to said file 
Storage device using the dedicated file access protocol; 
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(b) communicating with Ae file storage device to cause the file storage device to 
process the access request; and 

(c) causing selected malware scanning algorithms to be executed to determine 
whether the file identified by the access request is to be considered as malwate; 

wherein said step (c) comprises the steps 

responsive to configuration data, determining which malware scanninp algorithms 
should be selected for a particular file: and 

employing a scanning en gine to execute the malware scanning algorithms selected 
bv said determining step: 

wherein each device in the computer network is assigned an identifier, the proxy 
device being assigned a unique identi fier different to the identifier of the file storage 
device, the method comprising the steps of: 

connecting the client devices, the proxy device and the file storage device to a 
communic ation infi-astmcture of the computer network: 

configuring the client devices such that access requests issued bv the client 
devices are routed to the proxy device: and configuring the file storage device to send 
processed access requests to the proxy device. 

14. (Original) A method as claimed in claim 13, vviierein the dedicated file access 
protocol is the Server Message Block (SMB) protocol, and the access requests are SMB 
calls issued to the file stor^e device. 

1 5. (Original) A method as claimed in claim 13, wherein the dedicated file access 
protocol is the Network File System (NFS) protocol, and the access requests are NFS 
calls issued to the file storage device. 

16. (Cancelled) 

17. (Cancelled) 

18. (Cancelled) 



PA6E8f32'R(»nAT1Q/13/2l)056:40:05PM[Ea^^^ 



OCT. 13. 2005 3:51PM ZILKA-KOTAB. PC 

-6- 



NO. 0566 P. 9 



19. (Cancelled) 

20. (Original) A method as claimed in claim 13, further comprising the steps of: 

storing within a file cache files previowly accessed hy the client devices; 

upon receipt of an access request identifying a file to be read from the file storage 
device, determining whether the file identified by the access request is stored in the file 
cache and if so retuming the file to the client device without commxmicating with the file 
storage device. 

21 . (Original) A method as claimed in claim 20, wherein the file cache is arranged only to 
store files which have been determined not to be considered as malware. 

22. (Original) A method as claimed in claim 13, further comprising the steps of: 

upon receipt of an access request ftom a client device, determining from the 
access request predetermined attributes; sending those predetermined attributes to the file 
storage device to enable the file storage device to perform a validation check; and 

only allowing the access request to proceed if flie file storage device confirms that 
the client device is allowed to access the file identified by the file access request 

23. (Original) A method as claimed in claim 22, further comprising the step of storing 
within a user cache the predetermined attributes. 

24. (Original) A method as claimed in claim 13, wherein a plurality of said proxy devices 
are provided, the method further comprising the step of employing a passive load 
balancing mechanism to configure each client device to communicate with a particular 
proxy device in said plurali^, such that an access request issued by a particular client 
device will be dhected to a predetermined one of said proTcy devices dependent on how 
that client device was configured by the passive load balancing mechanism. 

25. (Currently Amended) A computer program product operable to configure a proxy 
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device to perfonn a method of malware scaiming of files stored within a file storage 
device of a computer network, the computer network having a plnrality of client devices 
arranged to issue access requests using a dedicated file access protocol to the file storage 
device in order to access files stored on the file storage device, the proxy device being 
arranged so as to into^ept access requests issued to the file storage device, and the 
computer program product comprising: 

(a) reception code operable to receive an access request issued by one of said 
client devices to said file storage device using the dedicated file access protocol; 

(b) communication code operable to communicate with the file storage device to 
cause the file storage device to process the access request; and 

(c) algorithm invoking code operable to cause selected malware scanning 
algorithms to be executed to detennine whether the file identified by the access request is 
to be considered as malware; 

wherein said algorithm invoking code is operable to determine, responsive to 
configuration data, which malware s f'^ninp alpinrithms j^hnuld be selected for a 
particular file, and the computer program product further comprises scanning engine ode 
responsive to said algorithm invoking code and operab le to execute the malware scanning 
algorithms selected bv said algorithm invoking code: 

wherein each device in the computer network is assigned an identifier, the proxy 
device being assigned a unique identifier different to the identifier of the file storage 
device, the client devices, the proxy device and the file storage device being connectable 
to a commu ntcfltinn i ^fyflf^9^ui;e of the computer network, the client devices being 
configured such that access requests issued bv the clie nt devices are routed to the proxy 
device, and the file storage device being configured to send processed access requests to 
the proxy device . 

26. (Original) A computer program product as claimed in claim 25, wherein the dedicated 
file access protocol is the Server Message Block (SMB) protocol, and the access requests 
are SMB calls issued to the file storage device. 

27. (Original) A computer program product as claimed in claim 25, wherein the dedicated 
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file access protocol is the Network File System (NFS) protocol, and the access requests 
are NFS calls issued to the file storage device. 

28. (Cancelled) 

29. (Cancelled) 

30. (Cancelled) 

31. (Cancelled) 

32. (Original) A compxrter program product as claimed in claim 25» further comprising: 

caching code operable to store within a file cache files previously accessed by the 
client devices; 

the reception code being operable, upon receipt of an access request identifying a 
file to be read from the file storage device, to determine whether the file identified by the 
access request is stored in the file cache and if so to cause the file to be returned to the 
client device without the communication code communicating with the file storage 
device. 

33. (Original) A computer program product as claimed in claim 32, wherein the file cache 
is arranged only to store files which have been determined not to be considered as 
malware. 

34. (Original) A computer program product as claimed in claim 25, wherein said 
reception code is operable, upon receipt of an access request from a climt device, to 
determine from the access request predetermined attributes, the coirmiunication code 
being operable to send those predetermined attributes to the file storage device to enable 
the file storage device to p^orm a validation check, the access request only being 
allowed to proceed if die file storage device confirms that the client device is allowed to 
access the file identified by the file access request. 
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35. (Original) A computer program product ss claimed in claim 34, further comprising 
storing code operable to store within a user cache the predetermined attributes, 

36. (Original) A computer program product as claimed in claim 25, wherein a plurality of 
said proxy devices are provided, the computer program product further comprising 
passive load balancing code operable to configure each client device to communicate 
with a particular proxy device in said plurality, such that an access request issued by a 
particular client device will be directed to a predetermined one of said proxy devices 
dependent on how that client device was configured by the passive load balancing code. 

37. (New) A proxy device as claimed in claim 1, wherein the processing logic determines 
whether the selected malware scanning algorithms are required to be run on the file 
before causing the selected malware scanning algorithms to be executed. 

38. (New) A proxy device as claimed in claim 37, wherein the determination is made 
according to additional configuration data specifying when scanning should be performed 
and the types of files that shoxild be scanned. 

39. (New) A proxy device as claimed in claim 1, wherein for a plurality of file storage 
devices on the computer network, a plurality of proxy devices are provided such that each 
file storage device is associated with one of the proxy devices. 

40. (New) A proxy device as claimed in claim 1, wherein for a plurality of file storage 
devices on the computer network, the proxy device is associated with all of the file 
storage devices. 

41 . (New) A proxy device as claimed in claim 40, wherein the proxy device is associated 
with all of the file storage devices when minimal scanning of files is performed. 
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42. (New) A method as claimed in claim 1 3, vrherem a computer network administrator 
has direct access to the file storage device. 

43. (New) A method as claimed in claim 13, AAiierein the plurality of client devices are 
allowed direct access to the file storage device if the procy device fails. 

44. (New) A proxy device as claimed in claim 10, wherem the predetermined attributes 
include a xiser name, a password of the user making the access request, a domain of the 
client device, an indication of the file to be accessed and an address of tiie client device. 
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